General discussion

Wifi in an office

My friend office have been setup using a WiFi for its network. Using SSID password and WEP as security, plus A MAC Address filter. Its works for all the employee... 8 of them, all using a laptop.

Hardware are, Linksys WRT54G, windows XP pro-sp2.

Problem is, the guess who bring their own laptop can not connect to the network and internet... unless someone type the SSID Password and inserting the Mac address manually in the router (but they don't have an IT guy...)

Question is, How to give a guess an access to network/internet... (without changing the router configuration back and forth...)

I thought of, having 2(TWO) Access Point, using different channel, but one of the AP is open (No security - but it will be turn ON/OFF as necessary)

-- If this configuration is possible, can both AP (different channel) still share a file or printer? --

Any Information or idea is appreciated

Thank You

Discussion is locked

Follow
Reply to: Wifi in an office
PLEASE NOTE: Do not post advertisements, offensive materials, profanity, or personal attacks. Please remember to be considerate of other members. If you are new to the CNET Forums, please read our CNET Forums FAQ. All submitted content is subject to our Terms of Use.
Reporting: Wifi in an office
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Comments
- Collapse -
AP with no security is a security hole!

Can they share a file or printer? Yes. However, if you have an AP with no security, then you've opened up your network. Handing out your SSID and WEP keys to guest is not ideal either, from a security stand point.
You could put a printer in the "DMZ" and have the guest come in on the DMZ side. Just keep in mind that any thing you allow guest to access from the DMZ, so can the rest of the world that is within RF range. So that makes file sharing a wee bit difficult. To keep the network secure, they will have to keep entering the MAC, WEP, and SSID.

Scott
http://www.AAApcMechanic.com

- Collapse -
just to be sure, if I understand

With two different Channel, I can still share file and printer.. Right?

i.e. read/write and print to a laptop that connected in different channel..

As for security, like I mention in my post, the 'open wifi network' is turn off/on as needed (when a there is a guess)

As for putting or letting the guess in DMZ zone, this involving AP/router configuration everytime a guess is coming.. correct?

Thank You

- Collapse -
how about this.

Try not to use mac filtering in the router. Just use SSID and WEP security. So you can set up SSID and WEP for your guess without reconfig the router. This way still give you some protection, but not as good as with mac filter too.

- Collapse -
I always employ MAC filtering.

It's simple and effective. After we have the LAN/Wifi up then we can see how WEP/WAP/such works out. I wish it always worked, but some make/models don't work with all clients so we start with the MAC filtering and move up.

Bob

- Collapse -
Network security?

It is not clear in the description. Do you have a server network or is it all peer-to-peer. If a network server is included, the SSIS/WEP access without MAC filtering will let guests get only to the internet. No adjustments are needed for each new guest. Periodic changing of WEP key can maintain security.

CNET Forums

Forum Info